Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: OMrfvq+W5Dik/s0yV6XJrZEk9QM4Yp6Oy9xPxgjbWyg=
Subject key identifier: 53:39:83:F9:2F:6F:53:55:90:9C:95:7A:E9:DD:51:D5:4B:C5:3C:72
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 76DB0FB66B636149F1EEFA3198343DD12F7B8943
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238383a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 00:42:02 +0000
ROA not before: Thu 15 May 2025 00:37:02 +0000
ROA not after: Thu 14 May 2026 00:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6288::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 00:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:db:0f:b6:6b:63:61:49:f1:ee:fa:31:98:34:3d:d1:2f:7b:89:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 00:37:02 2025 GMT
Not After : May 14 00:42:02 2026 GMT
Subject: CN=533983F92F6F5355909C957AE9DD51D54BC53C72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:e6:88:9f:2f:72:40:5d:d0:42:f1:c8:39:
6d:5f:de:62:40:44:39:14:cb:5f:6d:af:80:e0:51:
df:c9:ce:02:82:b4:80:3e:f7:1b:90:cf:d8:be:4d:
90:c6:d3:3e:2c:65:e5:19:c0:0b:32:4f:4c:38:75:
84:56:f4:cf:a0:1a:e6:a0:41:a2:8e:dc:59:5b:55:
25:f7:aa:69:5e:09:41:7f:c5:5a:25:9a:95:fe:91:
77:7f:24:ad:93:89:be:83:d3:f5:8a:53:89:f1:3f:
36:56:92:06:2b:c3:5e:04:de:48:95:cb:65:aa:c6:
97:90:72:08:00:fb:1a:20:ec:3f:d2:21:65:68:55:
22:b3:e1:e5:33:07:56:88:d6:70:0f:21:76:cd:d1:
e9:bc:ea:e0:a7:8c:9e:32:f1:a4:89:d9:90:89:0a:
67:91:7d:b2:c5:bd:06:61:97:27:5f:69:5f:e9:3f:
bd:af:96:45:e4:42:eb:69:2d:6b:2b:e9:21:90:6e:
ce:09:3d:e0:29:a3:8b:a6:fc:c7:cc:a9:7d:bc:f3:
3e:d7:b7:82:df:d4:e7:f9:06:89:08:0a:a8:96:1a:
2f:5e:86:f4:ef:9c:32:33:e4:57:1c:ab:5e:0e:16:
17:68:1f:68:49:7e:4c:93:24:e7:56:e9:eb:fd:73:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:39:83:F9:2F:6F:53:55:90:9C:95:7A:E9:DD:51:D5:4B:C5:3C:72
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6288::/48
Signature Algorithm: sha256WithRSAEncryption
1b:8c:e1:ec:81:0d:05:3e:02:e6:15:11:d3:03:df:c7:06:16:
c5:83:71:0d:e9:92:0f:1e:4a:ee:f8:2a:6e:bf:a6:ee:73:6c:
d4:11:81:d3:44:54:8a:e2:85:80:0c:75:d4:cf:e3:7c:fe:c6:
0e:7f:1a:74:8b:fa:0a:48:1e:11:3b:9f:fc:ba:38:53:ee:ae:
b4:1b:6d:55:63:40:a0:3c:93:4f:1f:f4:e4:c3:bb:28:91:a7:
8f:25:40:3e:ef:0b:dc:38:a3:b1:a8:15:7b:cc:e3:01:07:a6:
53:b4:4f:6e:b0:5f:83:b1:e0:21:10:19:9b:92:44:f4:a8:11:
99:5d:5d:f8:42:37:e4:7c:d7:8f:1c:c7:81:b8:52:e0:72:5b:
12:12:07:c4:c4:7a:16:cf:db:8d:5a:c6:da:39:07:e8:0e:87:
db:2c:ed:b1:d9:2a:03:f6:c6:c4:01:c1:7f:3c:73:b0:76:16:
85:ae:4a:77:68:33:f5:8a:1e:e6:fd:66:57:4b:97:8b:41:bd:
ff:b3:ea:c8:ec:b7:a6:48:9f:25:fc:f0:32:e8:86:70:ee:04:
db:fa:27:c8:d4:82:64:0a:44:92:8b:c9:84:f4:f7:4e:a1:fb:
0b:de:11:0f:64:bc:94:c6:1b:30:21:66:f1:ac:38:09:2d:96:
a5:97:cd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:57 2025 by rpki-client